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CLAIMS 

1 . A method of controlling access to patient medical information 
5 through a networked connection comprising: 

receiving patient medical information at an aggregate medical 

server; 

receiving patient access Instructions at the aggregate medical 

server; 

1 0 receiving an access request from a requestor at the aggregate 

medical server; 

determining whether the access request corresponds with the 
patient access instructions; and 

sending a portion of the patient medical information to the requestor 
1 5 based on the patient access instructions and the access request if the patient 
access instructions corresponds with the access request. 



2. The method of claim 1 wherein the patient access instructions 
include alert instructions. 

20 

3. The method of claim 2 further comprising: 

generating alerts over the network to any of a healthcare provider, 
a patient, a treatment facility or a government agency subsequent to receiving 
adverse medical data, 

25 

4. The method of claim 1 further comprising: 

providing a hyperlink to the aggregate server wherein the hyperlink 
comprises the access request. 

30 5. The method of claim 4 wherein the hyperlink is provided on a web 

site for access by the requestor. 
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6. The method of claim 1 wherein determining whether the access 
request corresponds with the patient access instructions further comprises 
implementing at least one security feature. 

5 

7. The method of claim 6 wherein the security feature is selected from 
a group consisting of a user password, a public key cryptograph, a digital 
signature, and an XML based security standard. 

10 8, The method of claim 1 further comprising: 

verifying a portion of the patient medical information with an outside 

server. 

9. The method of claim 8 wherein verifying the portion of the patient 
15 medical information comprises determining a patient eligibility. 

10. The method of claim 1 further comprising: 
updating the patient medical information. 

20 11. The method of claim 1 wherein the patient medical information is 

selected from a group consisting of a name, a social security number, a plan 
number, personal information, medical history information, medical claims 
information, prescription information, insurance company information, billing 
information, healthcare provider information, record ID, date of service and CPT4 

25 code. 



12. The method of claim 1 wherein the access information comprises 
level authorization information. 
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13. The method of claim 12 wherein level authorization comprises 
restriction to a patient medical information category. 

5 14. The method of claim 1 3 wherein the patient medical information 

category is selected from a group consisting of laboratory services, healthcare 
providers, pharmacy services and diagnostic services. 



15. A computer usable medium including a program for controlling 
10 access to patient medical information through a networked connection 
comprising: 

computer readable program code for receiving patient medical 
information at an aggregate medical server; 

computer readable program code for receiving patient access 
1 5 instructions at the aggregate medical sen/er; 

computer readable program code for receiving an access request 
from a requestor at the aggregate medical server; 

computer readable program code for determining whether the 
access request corresponds with the patient access instructions; and 
20 computer readable program code for sending a portion of the 

patient medical information to the requestor based on the patient access 
instructions and the access request if the patient access instructions corresponds 
with the access request. 



25 



16. The computer usable medium of claim 15 wherein the patient 
access instruction includes an alert instruction. 
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1 7. The computer usable medium of claim 1 6 further comprising; 
computer readable code for generating alerts over the network to 

any of a healthcare provider, a patient, a treatment facility or a government 
5 agency subsequent to receiving adverse medical data. 

1 8. The computer usable medium of claim 1 5 further comprising: 
computer readable code for providing a hyperlink to the aggregate 

server wherein the hyperlink comprises the access request. 

10 

1 9. The computer usable medium of claim 1 8 wherein the hyperlink is 
provided on a web site for access by the requestor. 

20. The computer usable medium of claim 1 5 wherein the computer 

1 5 readable code for determining whether the access request corresponds with the 
patient access instructions comprises computer readable code for implementing 
security features. 

21 . The computer usable medium of claim 20 wherein the security 
20 feature is selected from a group consisting of: a user password, a public key 

cryptograph, a digital signature, and an XML based security standard. 

22. The computer usable medium of claim 1 5 further comprising: 
computer readable code for verifying a portion of the patient 

25 medical information with an outside server. 

23. The computer usable medium of claim 22 wherein the computer 
readable code for verifying the portion of the patient medical information 
comprises computer readable code for determining a patient's eligibility. 

30 
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24. The computer usable medium of claim 1 5 further comprising: 
computer readable code for updating the patient medical 

information. 

5 

25. The computer usable medium of claim 1 5 wherein the patient 
medical information is selected from a group consisting of: a name, a social 
security number, a plan number, personal information, medical history 
information, medical claims information, prescription information, insurance 

10 company information, billing information, and health provider information. 

26. The computer usable medium of claim 1 5 wherein the access 
information comprises level authorization information. 

15 27. A system for controlling access to patient medical information 

through a networked connection comprising: 

means for receiving patient medical information at an aggregate 
medical server; 

means for receiving patient access instructions at the aggregate 
20 medical server; 

means for receiving a request from a requestor at the aggregate 
medical server; 

means for determining whether the access request corresponds 
with the patient access instructions; and 
25 means for sending a portion of the patient medical information to 

the requestor based on the access instructions and the access request if the 
patient access instructions corresponds with the access request. 



